janpecha/composer-cleaner

Project backingcaution

The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing or maintainer redundancy.

Release historycaution

The package has only 2 releases across nearly 6 years, with a median interval of about 5 years, although 1 release arrived in the last 12 months. This suggests limited release maturity despite the recent update.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months. Combined with the long historical release interval, this is a meaningful maintenance warning.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security-scanning tools were detected. Build tooling is present, while security-process visibility is limited.

Security policycaution

No security policy was found. For a Composer plugin that operates on installed vendor files, this weakens vulnerability-reporting transparency.